Privacy Policy Addendum

Letter Funnel, Waitlist, and Reply Storage • Version 1.1 • Effective 8 October 2026

This Addendum forms part of the Mr. Ugly Privacy Policy. It applies to the letter funnel, the waitlist, the letters and replies, and everything connected to umaycallme.com and join.umaycallme.com.

If this Addendum and the main Privacy Policy say different things, this Addendum governs for the processing described here.

1. Who Is Responsible

Redwood River Enterprises, LLC, an Arizona limited liability company, is the data controller for the processing described in this Addendum. In this Addendum, "we", "us" and "our" mean Redwood River Enterprises, LLC, and "you" means the person using the funnel.

We may use service providers for email delivery, storage, hosting, analytics, security, customer support, payment processing, and legal, accounting or compliance support. They can only use your information on our written instructions.

This Addendum covers the waitlist and email-capture page, the letters and the weekly sequence, membership offers, your replies to us, age and consent records, delivery and engagement data, analytics and referral information, and related support and security activity.

2. What We Collect At The Waitlist

When you join the waitlist or give us your email address, we may collect your email address, your IP address, the date and time you submitted, the version of the consent and disclosure wording you were shown, your age attestation, the referral source or campaign that brought you to the page, device and browser information, email delivery and engagement information, approximate location derived from technical data, and anything else you choose to tell us.

We do not ask you for your legal name, your address, your relationship history, or your medical information to join the waitlist.

3. Why We Use It

We use waitlist information to send you the Mr. Ugly letters and the weekly sequence, to tell you about membership plans including the monthly plan at $55 per month, the four-month plan at $200, and the annual plan at $540, to send service and security messages, to answer you when you write to us, to keep records of your consent and communication preferences, to measure delivery and campaign performance, to improve the letters, to detect abuse or fraud, to meet our legal obligations, and to protect the rights and safety of everyone involved.

Our lawful basis for marketing messages is your consent, and you can withdraw it at any time.

4. Commercial Messages

The letters and related messages may contain commercial content. These are commercial messages even when they are written in a creative or personal style. We will not use a creative presentation to hide the commercial nature of an offer.

Every commercial message identifies us, includes a valid postal address, includes a working unsubscribe link, uses accurate sender information, uses subject lines that match the content, and honours unsubscribe requests within the time the law requires.

5. Storing Your Replies

If you reply to a letter or a message, we store your reply so we can answer you, keep the correspondence in order, support you, protect the service, and improve the letters.

A reply may contain anything you choose to write, including your opinions, information about your relationships, your feelings, information about your mental health, your family or work circumstances, your personal history, or your contact details. We do not ask for sensitive information and you should not send medical records, diagnoses, crisis information, passwords, bank details, or government identification numbers by email.

We use replies to answer you, to address your questions, to keep the correspondence going, to improve the letters, to spot safety, abuse, fraud or compliance concerns, and to keep records we are required or reasonably need to keep.

We do not use replies to make automated decisions about you, and we do not use them to create hidden scores or undisclosed assessments about you.

Access to replies is limited to the people inside our team who need it for communications, support, compliance, security or content improvement. Service providers may access information only to provide their service to us, under confidentiality and security obligations.

We do not sell or share waitlist email addresses or replies for anyone else's marketing.

6. Sensitive Information

We do not ask for health information, mental-health information, information about your sex life or sexual orientation, details of relationship difficulties, or any other special-category information.

If you choose to include something like that in a reply, we may treat it as sensitive personal information. Where the UK GDPR or EU GDPR applies, we will only process it where we have a lawful basis and, where required, a valid condition such as your explicit consent. We may delete it if we do not need it, limit who can see it, and we will not use it to profile you or score you. We may ask you to resend a message without the sensitive part, or decline to keep that part.

Sending us sensitive information does not create a therapeutic, medical, counselling or professional relationship. This is not an emergency service. If you are in crisis, contact emergency services or a qualified professional.

7. Age

The funnel is for people aged 19 or over. Before you reach the letters, you confirm that you are 19 or over, that you are able to use the service, and that you understand the nature of the content.

This is a self-attestation based on what you tell us. We do not check your age against an identity document or a government database.

We record the attestation, including the time, the wording version you were shown, and the technical information needed to keep evidence of it.

If we learn that someone under 19 has given us information, we take reasonable steps to delete it and stop their access. We do not offer the funnel to anyone under 19.

8. Consent And Consent Records

At the point we collect your email, we show you the privacy notice, the consent wording, the age attestation, and the commercial-message disclosure.

We record your email address, the date and time you agreed, your IP address or a similar technical identifier, the exact version of the wording you were shown, your age attestation, the page or campaign you came from, how you gave consent, any later withdrawal, and how and when we handled that withdrawal.

Consent records are kept for six years from your last interaction with us, or longer where we reasonably need them to establish, exercise or defend a legal claim, or to meet a legal obligation.

Withdrawing consent does not undo processing that happened before you withdrew it.

9. How Long We Keep Things

  • Waitlist email address: until you unsubscribe, or twenty-four months of inactivity, whichever comes first.
  • Letter engagement data: twenty-four months.
  • Your replies: twelve months from the last correspondence, then deleted or anonymised.
  • Consent and age-attestation records: six years from the last interaction.
  • Unsubscribe and suppression records: as long as needed to honour the request and show we complied.
  • Raw analytics: twenty-four months.
  • Aggregated or anonymised analytics: may be kept indefinitely.
  • Legal, security, fraud or dispute records: as long as the relevant purpose requires.

We may keep information longer where we need to comply with the law, resolve a dispute, prevent fraud, enforce an agreement, preserve evidence, or protect our legal rights.

10. Sending Information Outside Your Country

You may be in the United Kingdom, the European Union, or elsewhere. Your information may be transferred to and handled in the United States, where we are based, and in other countries where our providers operate.

When information leaves the UK or the EU, we put legal safeguards in place. These may include the standard contractual clauses approved for this purpose, the UK's international data transfer agreement or the UK addendum, a transfer risk assessment, encryption, access controls, confidentiality obligations, and data minimisation. We keep that paperwork.

If you would like to know more about the safeguards we use, ask us and we will explain.

For Canada, we send commercial electronic messages only where we have the consent the law requires, with clear sender identification and a working unsubscribe link.

11. Who We Use

We may use service providers for email delivery and campaign management, secure storage, website hosting, analytics, security and fraud prevention, customer support, consent and preference management, payment processing, and legal, accounting or compliance support.

They may process your information only for the purposes we authorise, and they must keep it confidential and secure. We do not allow them to sell your email address or your replies, or to use them for their own marketing.

12. How We Protect It

We use appropriate technical and organisational safeguards, including access controls, authentication, encryption in transit and where appropriate at rest, limited internal access, audit logging, retention and deletion controls, confidentiality requirements on our providers, and incident response procedures.

No method of transmission or storage is completely secure. Please do not send passwords, payment details, government identification numbers, or medical records through the reply channel.

13. Your Rights

Depending on where you live, you may be able to ask us for a copy of what we hold, ask us to correct it, ask us to delete it, take back your consent, unsubscribe from marketing, object to or restrict certain processing, ask for your information in a portable form, ask about transfers abroad, and complain to a data protection authority.

Unsubscribing from marketing does not stop service, security, legal or account messages about the membership you have paid for.

Privacy requests and taking back your permission: [email protected]
Membership, billing and anything else: [email protected]
Legal notices and copyright: [email protected]
Post: Redwood River Enterprises, LLC, 4539 N 22nd St, Ste N, Phoenix, AZ 85016, United States

14. We Do Not Sell Your Information

We do not sell waitlist email addresses, replies, consent records, or correspondence. We do not share them with third parties for their own marketing.

We may pass information to service providers, professional advisers, authorities where the law requires it, or a successor if the business is sold, and only where we need to.

15. Changes To This Addendum

If the funnel, what we do with your information, our providers, or our retention practices change, we will update this Addendum, change the version and date, tell you about anything material, and ask for your consent again where the law requires it.

The version in force when you gave us your information is kept with your consent record, so we can always tell you which one applied to you.

16. Contact

Redwood River Enterprises, LLC
[email protected]
4539 N 22nd St, Ste N, Phoenix, AZ 85016, United States